Client Side Code Execution With Office
There are usually two ways to gain unauthorized remote access to a system.
The first is to exploit a vulnerable application
or service that is exposed to the Internet.
The second way is to trick a user into running malicious code.
This technique typically requires that the victim interact with a file or
an HTML web page in a browser.
These types of attacks fall into the category of
Social Engineering known as Phishing.
While vulnerabilities in software may be discovered and patched,
user behavior is much more difficult to correct, making this a particularly
appealing attack vector and the primary focus of this module.
In order to make this type of attack more effective, we’ll attempt to abuse
features in software which the end user commonly uses and trusts.
Specifically, the goal of this module is to gain code execution
through exploitation of Microsoft Office products.
This is a common attack vector
in both real-world attacks and in penetration tests.
In this module, we’ll present various client-side attacks
against the Microsoft Office Suite.
While our ultimate goal is to gain code execution on the target,
we’ll also discuss common attack scenarios and discuss payloads,
shellcodes, and common command and control infrastructures.